2026-06-18 05:01:34
(1 week ago)
<jail> banned by fail2ban
Brute-Force
Web App Attack
🇪🇸
librebit
2026-06-16 00:08:00
(1 week ago)
Brute force
Brute-Force
2026-06-15 18:41:00
(1 week ago)
Excessive crawling/scraping. Vulnerable file probing.
Brute-Force
Bad Web Bot
Web App Attack
🇲🇾
Rizzy
2026-06-14 21:57:42
(2 weeks ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇳🇱
ByeByte API
2026-06-13 00:36:34
(2 weeks ago)
byebyte.space auth: GET /_profiler/latest at 2026-06-13T00:36:34Z. Honeypot path hit; firewall auto- ...
show more
byebyte.space auth: GET /_profiler/latest at 2026-06-13T00:36:34Z. Honeypot path hit; firewall auto-banned the IP for 24h. UA: 'Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36'. Accept-Encoding: 'gzip, br'. Country (CF): NL. TLS info: {"scheme":"https"}.
show less
Web App Attack
Port Scan
🇳🇱
ByeByte API
2026-06-11 12:45:51
(2 weeks ago)
byebyte.space auth: GET /app/next%2econfig%2emjs at 2026-06-11T12:45:51Z. Source IP is currently on ...
show more
byebyte.space auth: GET /app/next%2econfig%2emjs at 2026-06-11T12:45:51Z. Source IP is currently on Spamhaus DROP/EDROP (confirmed botnet drone / hijacked netblock). Rejected 403. UA: 'Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36'. Accept-Encoding: 'gzip, br'. Country (CF): NL. TLS info: {"scheme":"https"}.
show less
Web App Attack
Brute-Force
🇬🇧
consul.to
2026-06-11 06:22:39
(2 weeks ago)
Web attack/malicious scanning detected
Web App Attack
🇫🇷
SpaceHost-Server
2026-06-08 22:30:55
(2 weeks ago)
Brute-Force
Web App Attack
2026-06-08 09:18:43
(2 weeks ago)
FortiWeb WAF: 12 attacks detected. Threat Score: 40400. Types: Client Management(6), Block IP List(6 ...
show more
FortiWeb WAF: 12 attacks detected. Threat Score: 40400. Types: Client Management(6), Block IP List(6). Origin: Netherlands.
show less
Web App Attack
2026-06-08 03:06:38
(3 weeks ago)
(mod_security) mod_security triggered on hostname [redacted])
SQL Injection
🇫🇷
SpaceHost-Server
2026-06-07 22:29:30
(3 weeks ago)
Brute-Force
Web App Attack
🇩🇪
strxmpp
2026-06-07 12:34:43
(3 weeks ago)
77.83.39.247 - - [07/Jun/2026:14:34:42 +0200] "POST /app/vendor/phpunit/phpunit/src/Util/PHP/eval-st ...
show more
77.83.39.247 - - [07/Jun/2026:14:34:42 +0200] "POST /app/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 4534 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36"
...
show less
Bad Web Bot
🇫🇷
Thibault Millant
2026-06-07 11:27:20
(3 weeks ago)
2026/06/07 13:26:44 [error] 2034303#2034303: *2367805 access forbidden by rule, client: 77.83.39.247 ...
show more
2026/06/07 13:26:44 [error] 2034303#2034303: *2367805 access forbidden by rule, client: 77.83.39.247, server: certifications.millant.ovh, request: "GET /api/%2eenv HTTP/1.1", host: "certifications.millant.ovh"
2026/06/07 13:26:49 [error] 2034302#2034302: *2367762 access forbidden by rule, client: 77.83.39.247, server: certifications.millant.ovh, request: "GET /app/%2eenv%2elocal HTTP/1.1", host: "certifications.millant.ovh"
2026/06/07 13:27:00 [error] 2034303#2034303: *2367978 access forbidden by rule, client: 77.83.39.247, server: certifications.millant.ovh, request: "GET /%2egit/config.old HTTP/1.1", host: "certifications.millant.ovh"
2026/06/07 13:27:02 [error] 2034303#2034303: *2367891 access forbidden by rule, client: 77.83.39.247, server: certifications.millant.ovh, request: "GET /app/%2eenv%2eproduction HTTP/1.1", host: "certifications.millant.ovh"
2026/06/07 13:27:20 [error] 2034303#2034303: *2368047 access forbidden by rule, client: 77.83.39.247, server: certifications.millant
...
show less
Brute-Force
Exploited Host
Web App Attack
🇩🇪
macrob
2026-06-07 10:58:18
(3 weeks ago)
2026/06/07 10:57:48 [error] 1311805#1311805: *287022920 access forbidden by rule, client: 77.83.39.2 ...
show more
2026/06/07 10:57:48 [error] 1311805#1311805: *287022920 access forbidden by rule, client: 77.83.39.247, server: ca5h.win, request: "GET /terraform%2etfstate%2ebackup HTTP/1.1", host: "ca5h.win"
2026/06/07 10:58:04 [error] 1311802#1311802: *287021621 access forbidden by rule, client: 77.83.39.247, server: ca5h.win, request: "GET /%2eterraform%2elock%2ehcl HTTP/1.1", host: "ca5h.win"
2026/06/07 10:58:17 [error] 1311805#1311805: *287022920 access forbidden by rule, client: 77.83.39.247, server: ca5h.win, request: "GET /%2ecircleci/config%2eyml HTTP/1.1", host: "ca5h.win"
...
show less
Web App Attack
2026-06-07 10:26:56
(3 weeks ago)
(caddyscan) Scanner path probe from 77.83.39.247 (NL/The Netherlands/-): 5 in the last 3600 secs; Po ...
show more
(caddyscan) Scanner path probe from 77.83.39.247 (NL/The Netherlands/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 77.83.39.247 - - [07/Jun/2026:10:25:42 +0000] "GET /static../var/www/html/.env HTTP/1.1"
[REDACTED] 200 2627 77.83.39.247 - - [07/Jun/2026:10:26:20 +0000] "GET /app/.env HTTP/1.1"
[REDACTED] 200 2627 77.83.39.247 - - [07/Jun/2026:10:26:27 +0000] "GET /vendor/.env HTTP/1.1"
[REDACTED] 200 2627 77.83.39.247 - - [07/Jun/2026:10:26:30 +0000] "GET /storage/.env HTTP/1.1"
[REDACTED] 200 2627 77.83.39.247 - - [07/Jun/2026:10:26:54 +0000] "GET /.env.local.php HTTP/1.1"
show less
Port Scan